DL-171
SpawnAgent classifies adminOnly on the network door, alongside the sibling lifecycle RPCs (it provisions AND starts — strictly more powerful); the Bridge control surface is bootstrap-admin-only for MVP, and any future non-admin opening is authenticatedOpen + per-account authorization in the handler, not a bare reclassification
Status: Superseded by DL-253 (Matt, 2026-08-25)
Record: ../../agent/compass-spawn-control/design.md#dl-171-prior-decision–spawnagent-ships-adminonly